My CTF Challenges

A repository for CTF challenges I created. Have fun playing CTFs 😎

ToC

• SECCON CTF 13 Quals
• IERAE CTF 2024
• AlpacaHack Round 2 (Web)
• SECCON CTF 2023 Finals
• IERAE DAYS CTF 2023
• SECCON CTF 2023 Quals
• SECCON CTF 2022 Finals
• SECCON CTF 2022 Quals
• SECCON CTF 2021

SECCON CTF 13 Quals

Sat, 23 Nov. 2024, 05:00 UTC — Sun, 24 Nov. 2024, 05:00 UTC

• CTFtime

Challenge	Category	Solved	Difficulty	Keywords	Co-Author
Trillion Bank	web	84	★	MySQL	N/A
self-ssrf	web	23	★★	URL parser, Bun	N/A
double-parser	web	17	★★	HTML parser, XSS	N/A
pp4	jail	41	★	JavaScript, prototype pollution	N/A
1linepyjail	jail	15	★★	pyjail	N/A
Go to Jail	jail	6	★★★	Go, polyglot, code golf	N/A
voidbox	jail	3	★★★★★	JavaScript, sandbox escape	Satoooon

IERAE CTF 2024

Sat, 21 Sep. 2024, 06:00 UTC — Sun, 22 Sep. 2024, 06:00 UTC

• CTFtime

Challenge	Category	Solved	Difficulty	Keywords
5	misc	8	★	Bun
Leak! Leak! Leak!	web	3	★★★★	XS-Leak, CSP

AlpacaHack Round 2 (Web)

An individual competition in 6 hours:
Sun, 01 Sep. 2024, 03:00 UTC — Sun, 01 Sep. 2024, 09:00 UTC

• CTFtime
• Website

Challenge	Category	Solved	Writeup	Keywords
Simple Login	web	84	link (ja)	SQL injection
Pico Note 1	web	10	link (ja)	CSP bypass, JavaScript
CaaS	web	13	link (ja)	RCE, Perl
Pico Note 2	web	3	link (ja)	Import Maps

SECCON CTF 2023 Finals

Sat, 23 Dec. 2023, 01:00 UTC — Sun, 24 Dec. 2023, 09:00 UTC

• CTFtime (International)
• CTFtime (Domestic)

Challenge	Category	Solved / 12 (International)	Solved / 12 (Domestic)	Difficulty	Writeup	Keywords
babywaf	web	8	4	★	link	WAF bypass
cgi-2023	web	5	2	★★★	link	XS-Leak, subresource integrity
LemonMD	web	2	1	★★★	link	Fresh, Islands Architecture
DOMLeakify	web	1	0	★★★★★	link	CSS injection on style attributes
whitespace.js	misc	2	2	★★	link	JavaScript sandbox

IERAE DAYS CTF 2023

An onsite local event:
Thu, 7 Dec. 2023

• Repository

Challenge	Category	Keywords
simple-proxy	web	request target

SECCON CTF 2023 Quals

Sat, 16 Sept. 2023, 05:00 UTC — Sun, 17 Sept. 2023, 05:00 UTC

• CTFtime

Challenge	Category	Solved / 653	Difficulty	Writeup	Keywords
blink	web	14	★★	link	DOM clobbering
eeeeejs	web	12	★★★	link	ejs, XSS puzzle
hidden-note	web	1	★★★★★	link	XS-Leak, unstable sort
crabox	sandbox	53	★	link	Rust sandbox
node-ppjail	sandbox	5	★★★	link	prototype pollution
deno-ppjail	sandbox	2	★★★★	link	prototype pollution

SECCON CTF 2022 Finals

Sat, 11 Feb. 2023, 01:00 UTC — Sun, 12 Feb. 2023, 09:00 UTC

• CTFtime (International)
• CTFtime (Domestic)

Challenge	Category	Solved / 10 (International)	Solved / 12 (Domestic)	Difficulty	Writeup	Keywords
babybox	web	6	4	★	link	prototype pollution
easylfi2	web	10	8	★	link	LFI, curl
MaaS	web	3	1	★★★	link	newline normalization, CSP bypass
light-note	web	0	0	★★★	link	DOM clobbering, Sanitizer API
dark-note	web	0	0	★★★★	link	time-based oracle

SECCON CTF 2022 Quals

Sat, 12 Nov. 2022, 05:00 UTC — Sun, 13 Nov. 2022, 05:00 UTC

• CTFtime

Challenge	Category	Solved / 726	Difficulty	Writeup	Keywords
skipinx	web	102	★	link	query parser
easylfi	web	62	★	link	LFI, curl
bffcalc	web	41	★★	link	HTTP request splitting
piyosay	web	19	★★★	link	Trusted Types, DOMPurify, RegExp
denobox	web	1	★★★★	link	prototype pollution, import maps
spanote	web	1	★★★★★	link	Chrome, disk cache, bfcache
latexipy	misc	8	★★	link	pyjail, magic comment
txtchecker	misc	23	★★	link	magic file, ReDoS
noiseccon	misc	22	★★	link	Perlin noise

SECCON CTF 2021

Sat, 11 Dec. 2021, 05:00 UTC — Sun, 12 Dec. 2021, 05:00 UTC

• CTFtime

Challenge	Category	Solved / 506	Difficulty	Writeup	Keywords
Sequence as a Service 1	web	20	★★	link	JavaScript sandbox
Sequence as a Service 2	web	19	★	link	JavaScript sandbox
Cookie Spinner	web	7	★★★	link	DOM clobbering
x-note	web	3	★★★★	link	XS-Search